active-directory-attacks
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Provides extensive shell command templates for both Linux (Bash) and Windows (PowerShell) to perform network exploitation and domain dominance.
- [COMMAND_EXECUTION]: Includes instructions for privilege escalation on the local attack host, such as using
sudo dateto synchronize clocks for Kerberos authentication. - [COMMAND_EXECUTION]: Features commands that modify target system state, including the creation of backdoor users (
net user backdoor ...) and malicious GPO tasks. - [EXTERNAL_DOWNLOADS]: References numerous external security tools and specialized exploit scripts, such as Impacket, Mimikatz, BloodHound, Rubeus,
certipy, andsam_the_admin.py, which are expected to be present in the execution environment. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it interpolates user-controlled data—including IP addresses, account credentials, and arbitrary command strings—directly into shell command templates without sanitization.
- Ingestion points: User-supplied target IPs, domain names, usernames, and the
<command>placeholder used infaketimetemplates inSKILL.md. - Boundary markers: Absent. The skill provides raw command templates without using delimiters or protective instructions to isolate untrusted user data.
- Capability inventory: Extensive subprocess execution capabilities across a wide range of network and system management tools.
- Sanitization: Absent. No validation or escaping logic is provided for user-supplied values before they are executed in a shell context.
Audit Metadata